Forrester: Rethink Reliance on Professional Certifications
To many IT and security professionals, industry certifications are a necessary evil. Primarily due to common—yet increasingly questioned—hiring practices, certifications are vital for entry-level cybersecurity workers who need to establish a baseline understanding to potential employers. However, Forrester concluded such certifications might hurt the cybersecurity talent pool in both the ... Read More
Third-Party Risk Management Efforts Remain Lackluster
Despite calls to re-shore and streamline supply chains during the great availability disruptions caused by the COVID-19 pandemic, enterprises are still increasing their reliance on third parties. They’re doing so to optimize productivity or, at the very least, remain competitive. While third-party suppliers often provide cost-effectiveness, speed and help increase ... Read More
Ukraine Deputy Cyber Leader on Lessons From Russia-Ukraine Cyberwar
As the conflict with Russia intensified into war earlier this year, the cyberattacks on Ukrainian interests didn’t come as a surprise to Victor Zhora, who recently spoke via video link with BlackBerry CEO John Chen at BlackBerry’s recent Summit 2022. Zhora, Ukraine’s deputy cyber leader, explained that the Ukrainian government ... Read More
Space Force CIO Calls for Greater Collaboration, Secure Commercial Software
Whether it’s our navigation systems or systems that manage our everyday communications, the modern world is extremely dependent on satellites. That, of course, means satellites will increasingly become targets for attacks, including cyberattacks, as well as conduits of attack. In fact, it’s already happening. For instance, in February 2022, a ... Read More
AMI Brings Secure Firmware to the Open Compute Project
The pool of available open source resilient firmware keeps growing. This week, dynamic firmware maker AMI announced the contribution of its Tektagon OpenEdition Platform Root of Trust to the Open Compute Project (OCP). It’s a move the company hopes will provide increased options to organizations that wish to build devices ... Read More
GitLab Releases Bevy of Security and Compliance Enhancements
If any good came out of the Log4j vulnerability and SolarWinds attacks, it was the fact that they dramatically increased awareness of software supply chain security. Software supply chain security is only as strong as the weakest exposed link; often, that’s a software library or third-party service. To help organizations ... Read More
White House Proposes IoT Security Labeling
The White House last week held a meeting with the private sector, tech associations and government representatives to discuss the development of a security label for IoT devices. The label would be akin to the Energy Star label, an initiative led by the Environmental Protection Agency and the U.S. Department ... Read More
Open Compute Project Unveils Caliptra, a Silicon Root-of-Trust
Ubiquitous hardware security, whether a secure enclave or a fully trustable boot sequence, has long been a security goal. With the announcement of the Caliptra 0.5 specification today, the Open Compute Project Foundation (OCP) hopes to bring that vision closer to reality. The OCP Foundation is an industry collective that ... Read More
Inseego and CyberReef Partnership Seeks to Secure 5G Mobile Access
This week, 5G enterprise cloud WAN equipment provider Inseego and mobile firewall maker CyberReef announced a partnership the two companies say will help streamline the deployment of secure 5G mobile access applications. The global 5G technology market is expected to remain white-hot. Market research firm Allied Market Research said the ... Read More
VMware Research Uncovers Evolving Nature of Emotet Malware
In January 2021, coordinated by Europol and Eurojust, law enforcement authorities from the Netherlands, Germany, the United States, the United Kingdom, France, Lithuania, Canada and Ukraine collaborated on one of the most dramatic botnet disruptions to date. Law enforcement managed to commandeer control of a massive botnet and redirect infected victims ... Read More
